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AUTHENTICATABLE IMAGE WITH AN EMBEDDED IMAGE 
HAVING A DISCERNIBLE PHYSICAL CHARACTERISTIC WITH 
IMPROVED SECURITY FEATURE 

FIELD OF THE INVENTION 

The invention relates generally to the field of image processing, 
and in particular to providing a secure document such as a passport, event ticket, 
currency, or a postal stamp, coupon or envelope. 

BACKGROUND OF THE INVENTION 

In US patent application, serial number 09/613,989, a method is 
disclosed that enables the use of paper or textured media to be authenticated based 
upon an embedded signal derived from the physical textural attributes of the 
media. A carrier is formed by scanning a region or multiple regions of the media 
and is convolved with a message to form an authenticable signal. After scanning, 
the carrier is subdivided and rearranged in ways that prevents a person from 
"discovering" the carrier. 

Although this method is satisfactory, it includes drawbacks. One 
such drawback is that it adversely affects the robustness of the data-embedding 
algorithm. When the receiver having the carrier is being verified as authentic, the 
carrier regions must be rescanned. Any scanning errors introduced, for example, 
in scanning angle, in scanning starting point, or in scanning scale are compounded 
proportionately to the number of subdivisions, mirrors or other manipulations 
applied to improve security. These errors affect the algorithms robustness or 
equivalently the data capacity of the algorithm. 

Consequently, a need exists for a means to either completely 
overcome the errors introduced by the rescanning process or to minimize their 
effect while improving overall security of the processes. 
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SUMMARY OF THE INVENTION 

The present invention is directed to overcoming one or more of the 
problems set forth above. Briefly summarized, according to one aspect of the 
present invention, the invention resides in a method for creating an authentic 
5 image on a receiver, the method comprising the steps of: (a) providing a first 
carrier formed from information related to a physical characteristic of the 
receiver; (b) providing a second carrier that is randomly generated; (c) combining 
the first and second carrier such that the first carrier cannot be derived without the 
second carrier for forming a combined carrier; (d)combining the combined carrier 

1 0 with predetermined content for forming the authentic image having the 
predetermined content; and (e) including the authentic image having the 
predetermined content on the receiver. 

These and other aspects, objects, features, and advantages of the 
present invention will be more clearly understood and appreciated from a review 

15 of the following detailed description of the preferred embodiments and appended 
claims, and by reference to the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 illustrates a binary message image and an iconic message 
20 image as an edge map depicting a Kodak trademark; 

FIG. 2 is a graph depicting the Fourier amplitude vs. the spatial 
frequency of an optimally designed carrier, 

FIG. 3 illustrates a receiver containing a carrier scan region picture 
that has been embedded with information; 
25 FIG. 4 illustrates a sequence of steps for converting a message into 

a format appropriate for embedding into an image; 

FIG. 5 is a depicts a block diagram for the process of forming a 
secure carrier from a scan; 

FIG. 6 is a diagram illustrating convolving a message with two 
30 carriers to form a secure dispersed mesage; 



FIG. 7 is a diagram illustrating correlating the embedded image 
with the two carriers for extracting the message; 

FIG. 8 depicts the process, in block diagram form, of decrypting 
the extracting message for discerning the message. 

DETAILED DESCRIPTION OF THE INVENTION 

As used herein, authenticable means capable of verifying or 
capable or proving authenticity. 

The invention utilizes aspects of data embedding. The science of 
data embedding is also referred to as data hiding, information hiding, 
watermarking and steganography. A preferred basic data embedding technique is 
disclosed in Honsinger, et al, U.S. Patent 6,044,156. A review of this technique 
and associated embellishments to the technique is briefly discussed hereinbelow. 
An original image is represented as the two-dimensional array, i(x, y ), the 
embedded image, r(x,y), and a carrier is defined as c(x, y ). A message that is 
embedded, M(x, y ) , in its most general form, is an image. The message can 
represent an icon, for example, a trademark, or may represent the bits in a binary 
message. In the latter case the on and off states of the bits are represented as plus 
and minus ones, or positive and negative delta functions (spikes) which are placed 
in predefined and unique locations across the message image. Reffering to FIG. 
1 , an example of a binary message image 2 and an iconic message image 4 is 
shown. Examples of iconic data types are trademarks, corporate logos or other 
arbitrary images. Performance generally decreases as the message energy 
increases so edge maps of the icons are used. Examples of binary data types are 
32 bit representations of URL's, and copyright ID codes, or authentication 
information. 

With these definitions, the preferred embedding equation is: 



I \x,y) = a(M{x,y)* C(x,y ))+/ (x ,y ), 



(1) 
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where the symbol, * , represents circular convolution and a is an arbitrary 
constant chosen to make the embedded energy simultaneously invisible and robust 
to common processing. From Fourier theory, spatial convolution in the frequency 
domain is the same as adding phase while multiplying magnitudes. Therefore, the 
5 effects of combining the message with a carrier, such as by the described 

convolution technique, distributes the message energy in accordance with the 
phase of the carrier and to modulate the amplitude spectrum of the message with 
the amplitude spectrum of the carrier. If the message were a single delta function 
and the carrier of random phase and of uniform Fourier magnitude, the effect of 
1 0 convolving with the carrier would be to distribute the delta function over space. 
Similarly, the effect of convolving a message with a random phase carrier is to 
spatially disperse the message energy. 

The preferred extraction process is to correlate with the same 
carrier used to embed the image: 

15 

I\x,y) ®C{x,y) = a(M^,yYC(xy))®C(xy) 
+I(x,y)®C(x,y), 1 } 

where the symbol, ® , represents circular correlation. Correlation is similar to 
convolution in that Fourier magnitudes also multiply. In correlation, however, 
20 phase subtracts. Therefore, the phase of the carrier subtracts on correlation of the 
embedded image with the carrier leaving the message. Indeed, assuming that the 
carrier is designed to have uniform Fourier amplitude, then, and the process of 
correlation of the carrier on the embedded image Eq. 2, can be reduced to: 

25 I\x,y)®C{x,y) = aM(x,y)+noise (3) 

That is, the process of correlation of the embedded image with the carrier 
reproduces the message image plus noise due to the cross correlation of the image 
with the carrier. 
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Tiling the dispersed message on the original image improves the 
robustness of the algorithm. For this invention, preferably, a single 256x256 
dispersed message is tiled over the entire image. Upon extraction, each 256x256 
region is aligned and summed to produce the final message. As disclosed in 
5 commonly assigned U.S. Serial No. 09/453,247 filed December 2, 1 999, for 

imaging applications with severe quality loss, such as small images printed using 
ink-jet printers on paper, a weighting factor that depends on the estimated signal 
to noise ratio can be calculated and applied to each extracted message element 
before summation. 

10 The extracted message is denoted as M\x, y ) , the equation for 

extracting the message (Eq. 2 and Eq. 3 ) can be rewritten as: 

M\x,y) = aM{x,y)* {C<x ,y)®C (x noise (4) 

15 The above equation suggests that the resolution of the extracted message is 
fundamentally limited by the autocorrelation function of the carrier, 
c(x, y )<s> c(x, y ) . Any broadening of c(x, y )® c(x, y ) from a delta function will blur the 
extracted message when compared to the original message. Another way to view 
the effect of the carrier on the extracted message is to consider c(x,y)& c(x,y) as a 

20 point spread function, since convolution of the original message with 
c(x, y )®c(x >y ) largely determines the extracted message. 

The design of the carrier should consider both the visual 
detectability of the embedded signal and the expected signal quality at the 
extraction step. There is clearly a design tradeoff between achieving optimum 

25 extracted signal quality and embedded signal invisibility. 

A carrier designed for optimal extracted signal quality will possess 
increasing amplitude with increasing spatial frequency. This may be derived from 
the well-known characteristic of typical images that the Fourier amplitude 
spectrum falls as the inverse of spatial frequency. At low spatial frequencies, 

30 where typical images have their highest energy and influence on the extracted 



-6- 

image, the present invention carrier uses this result. In particular, the mean or DC 
frequency amplitude of our carrier is always zero. As spatial frequency is 
increased, the carrier amplitude envelope smoothly increases with increasing 
spatial frequency until about 1/16 to 1/5 Nyquist. 
5 For frequencies greater than this, the carrier envelope is derived 

from a Contrast Sensitivity Function (CSF). A graph representing a one- 
dimensional slice of the Fourier amplitude of such a carrier is depicted in FIG. 2. 
Use of the CSF in an image embedding application is described in greater detail in 
Daly, U.S. Patent 5,905,819. 

10 The CSF provides a measure of the sensitivity of the average 

observer to changes in contrast at a given spatial frequency. The reciprocal of the 
CSF can be used to prescribe the amount of amplitude needed for the embedded 
signal to be detectable by an average viewer. Many modern CSF models facilitate 
for observer viewing distance, background noise, receiver dot density, color 

1 5 component wavelength and other factors. 

Use of these CSF parameters can be an advantage when optimizing 
an embedding algorithm for a specific application. One particularly useful way of 
sizing the embedding algorithm for a specific system is to define the quality of the 
embedded signal in terms of the viewing distance at which the embedded signal 

20 can be visually detected. Once this is defined, an optimized carrier can be 
immediately derived and tested. 

For a binary message, the impact of this carrier envelope is to 
produce a very small sidelobe around each delta function. It may be argued that 
the sidelobes limit the bandwidth of the algorithm. However, it has been found 

25 that the destructive processes of compression, error diffusion, printing and 
scanning have a far greater influence on the bandwidth of the algorithm. In a 
binary message, these destructive processes are the limiting factor of the bit 
density and can be thought of as defining the minimum separation distance 
between the delta functions. So long as the sidelobes are confined within half of 
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the minimum bit separation distance, sidelobe interference may be considered 
minimal. 

Correcting for rotation, scaling and skew is a fundamental element 
of all robust data embedding techniques. In Honsinger, et.al, US patent 5,835,639, 
5 Method for detecting rotation and magnification in images, a preferred method of 
correction of rotation and scale is provided. The correction technique relies on 
autocorrelation the embedded image. For example, upon autocorrelation of an 
embedded image that has not been rotated or scaled, one would expect to see 
correlation peaks spaced horizontally and vertically at intervals of 256 pixels and 

1 0 256 lines. At the zero offset correlation point, there is a very high peak due to the 
image correlating with itself. 

Now, if the embedded image is scaled, the peaks must scale 
proportionately. Similarly, if the embedded image is rotated, the peaks must 
rotate by the same amount. Therefore, the rotation and scale of an image can be 

15 deduced by locating the autocorrelation peaks. Detection of the actual rotation 

angles is limited to angles in the range (-45° ,+45°]. However, the actual rotation 
angle will be a member of the set = e calM ± «90° , where n is an integer. 
Because of the possibility that the image has been flipped or rotated in increments 
of 90 degrees during the message extraction process, this ambiguity is not a 

20 fundamental limitation. It can be shown that this method can correct for a general 
affine transform since an affine transform preserves relative shapes. That is, a 
shape that is repeated twice will still appear twice, and the new shapes will still be 
identical providing a good autocorrelation for realistic applications of data 
embedding. 

25 The effect of the autocorrelation properties of the original image 

can be significant. Without ancillary processing, high amplitude low frequency 
interference in the autocorrelation image can make the process of detecting peaks 
difficult. To minimize this problem, localized first order and second order 
moment normalization on the embedded image before the autocorrelation. This 

30 process consists of replacing each pixel in the image with a new pixel value, v new : 



v neK =^(v M -m M ) (5) 

where v oW ,is the original pixel value, m old , is the local mean of the image, <r rfa5lW is 
5 the desired standard deviation, which is generally set to the expected embedded 
signal standard deviation and o- oH is the local standard deviation. Because this 
operation is over a small area, typically over a (3x3) or (5x5) region, its effect in 
removing the high amplitude, low frequency coherent noise is quite substantial. 
For the limiting case when a old -> o , v new is equated to a value taken from a 

1 0 random noise generator having a standard deviation o desirea . 

The next piece of ancillary processing performed is to shape the 
autocorrelation peaks. This is done during the FFT operation used in the 
autocorrelation processing. A function that increases linearly with spatial 
frequency in the Fourier magnitude domain is quite satisfactory. This function is 

1 5 consistent with a Wiener filter designed to maximize the semblance of the 

correlation peaks to delta functions under the assumption that the image Fourier 
amplitude spectrum exhibits an asymptotic "l/(spatial frequency)" falloff. 
Following these processing steps produces peaks that need little further 
processing. 

20 Importantly, because autocorrelating the embedded image requires 

no extra calibration signal, it does not tax the information capacity of the 
embedding system. In addition, this technique can be applied to any embedding 
technique with redundant embedded signals and may implemented on a local level 
to confront low order geometric warps. 

25 The ability to recover from cropping is an essential component of a 

data embedding algorithm. As disclosed in commonly assigned U.S. Serial No. 
09/453,160 filed December 2, 1999, if one were to extract from an arbitrarily 
located 256x256 region of an embedded image, the extracted message would 
probably appear to be circularly shifted due to the unlikely chance that the 

30 extraction occurred along the original message boundary. 
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Indeed, if the origin of the 256x256 extracted region was a 
distance, (Ax, Ay) , from its nearest "original" origin, then the extracted message, 
M\x, y ) can be written as: 

MXx,y) = M(x,y)*S(x-A X ,y-Ay) (6) 

where it has been assumed that the convolution is circular, that the carrier 
autocorrelated to a delta function and that the image contributes no noise. 

On the surface, this circular shift ambiguity is a severe limitation 
on data capacity because it imposes the constraint that the message structure must 

1 0 be invariant to cyclic shifts. However, the present invention provides a way 

around this by placing the bits in the message in a special manner. First, there is 
required the use of a "message template," that is, a prescription of where to place 
the bits in a message image. The message template is derived by placing positive 
delta functions on a blank 256x256 image such that each delta function is located 

1 5 a minimum distance away from all others and such that the autocorrelation of the 
message template yields as close as possible, a delta function. That is, the bits are 
placed such that the message template autocorrelation sidelobes are of minimal 
amplitude. 

Now, correlation of the extracted region with a zero mean carrier 
20 guarantees that the extracted circularly shifted message M\x, y ) is also zero mean. 
If the message template is called, T{x, y ) , then the absolute value of the the 
extracted template must be practically equivalent to a circularly shifted message 
template. That is, 



\M\x,y)\ = T{x,y)*S{x-hx,y-Ay) (7) 

This implies, due to the autocorrelation property of the message template, that the 
shift from the origin of the message can be derived by correlating |M'(*,y)| with 
T(x,y) , since: 



\M'(x,y)\®T{x,y)= 5(x-Ax,y-Ay) (8) 



Therefore, the result of the correlation will be a 256x256 image, whose highest 
peak will be located at the desired shift distance, (Ax, Ay) . This peak location can 
5 be used to correctly orient the interpretation of the embedded bits. 

There are many applications of this invention to media. A 
paycheck, a will, a product label, or any media that it is wished to prove that it is 
an original. For the sake of specificity, we shall choose an envelope with a stamp 
as a preferred embodiment. Here the media to be scanned to form a carrier is 

1 0 paper, however, it is understood that virtually any media will suffice as a receiver 
so long as it has a discernible physical characteristic which is subject to a 
reasonably high resolution scan for producing a carrier. 

In accordance with the present invention, a self authenticating 
media using a public fiber carrier and an auxiliary private carrier will now be 

1 5 described in more detail. FIG. 3 shows a medium, such as a medium 10, in this 
case paper, containing a scan area 12, and a picture used to hide the secure 
embedded image 14. FIG. 4 is a block diagram showing the steps needed to form 
the message image needed to practice the invention using the technique outlined 
above. The message, shown in block 16, should contain information such as 

20 postage. If the message only contained postage, for example 33 cents, and if the 
maximum postage allowed for the size of the envelope was $2.56, then eight bits 
(2 8 =256) of information would be needed to convey all postage amounts. 
However, performance is not substantially degraded when using 32 or 64 bits, 
when compared to 8 bits, providing a much greater number level of possibilities. 

25 Once the message has been expressed in its binary form, it is possible to encrypt, 
as shown in block 18, by using any desired encryption algorithm. One encryption 
technique is a public/private key technique. Using a public/private key technique 
enables only the message generator to know how to encrypt the message. The 
entity performing the validation or authentication can only decrypt the message 

30 with its own key. Public/private key encryption is well known to anyone 



conversant in encryption technologies. In the case of a postage stamp, a private 
key encryption system would suffice given that the post office would control both 
the encryption and decryption process. However, in the case of a currency, 
wherein a government authorizes many different vendors to build authenticating 
5 ATM (automated teller machines) a public/private scheme would make more 

sense. This is because by allowing the multiple vendors of the ATM machines the 
same key used to generate the message, the government would increase the 
chances that a vendor would use the key to generate counterfeit currency, After 
the encryption, the bits shown in block 20 are placed on a message template 22 

1 0 according to known bit placement rule. As a preferred embodiment, assuming one 
takes the first bit and place it on the message template in the topmost and leftmost 
possible position. If the first bit is a 1, the value 1 is disposed in a first position. If 
the bit is a zero, the value a -1 in the first position. The next bit from 20 is placed 
in the next top most left most position available, using the same rules for polarity. 

1 5 This process continues in this fashion until all bits placed yielding the message 
image 24. 

The message image needs to be convolved with the carrier derived 
from the fibrous character of the paper. The process of forming a carrier is 
depicted in FIG. 5. Scan area 12 is scanned at a high resolution in block 26. In a 

20 preferred embodiment, the area is scanned at 300 or 600 dpi. For concreteness, 
choose 600 dpi as a preferred scanning resolution. Once this image is obtained, it 
is transformed to the Fourier domain as shown in block 28. The objective of the 
shaping step as shown in block 30 is to provide a carrier that maintains the fibrous 
character of the scan, but also provides an efficient information carrying entity. 

25 This shaping process is described in detail in US patent application serial number 
09/613,989. After the shaping, the image is inverse Fourier transformed in block 
3 1 to form a shaped carrier. The shaped carrier is rearranged in block 34 as 
described in US patent application 09/613,989. The rearrangement step is 
intended to provide an additional level of security. Specifically, because a 

30 counterfeiter might determine the region of the paper where the carrier is derived 
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either by the users explicit use of fiducials or by trial and error, rearrangement of 
the data in the shaped carrier is a reasonable security measure. The shaped 
scanned carrier is divided into 16 equal area regions as also described in US 
patent application 09/613,989. Each of the subregions (64x64) is placed into a 
5 different place in the carrier image. It is important to make sure that there are no 
blank areas. To better appreciate this, an illustration is helpful. In this regard, 
imagine constructing a blank 256x256 image. Next, take a region from the equally 
divided area shaped scanned carrier. Place this in one of the equally divided areas 
in the blank image. There are 16 possible positions. Repeat the process with the 

10 next data from the shaped scanned carrier. There are now 15 possible positions to 
place this. The rearrangement step allows the carrier data to have 16! (16 
factorial or 20,922,789,888,000) different renditions. Additionally each of the 
carriers can be randomly flipped or rotated (in 90 degree increments) to make the 
counterfeiting even more difficult. The prescription of the placement steps can be 

1 5 perform in accordance with a key known only to the authentication authorities. 

A shortcoming of rearranging the carrier is that it adversely affects 
the robustness of the data-embedding algorithm because during the carrier 
formation stage at the authentication step, the regions must be rescanned, and any 
scanning errors introduced, say, in scanning angle, in scanning starting point, or in 

20 scanning scale are compounded proportionately to the number of subdivisions, 
flips or other manipulations. These errors affect the algorithms robustness or 
equivalently the data capacity of the algorithm. 

Although the rearrangement step described above can produce a 
secure system, another even more secure algorithm can be used either 

25 independently or in combination with the above steps. In this regard, a second 
carrier is produced with a substantially flat or equivalently, uniform amplitude 
spectrum, which is also generated from a random key. One method for 
performing this is described in U.S. Patent 6,044,156 by Honsinger, et al. This 
can be convolved with a first carrier, which is scanned from the paper either 

30 directly or as described above. The result of this convolution is a third carrier. The 
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third carrier is used to convolve with the message. Since second carrier can only 
be reproduced with the key, the third carrier cannot be reproduced without the 
key. This provides a system that depends on the media, as in the prior art, and an 
additional key that is completely independent of the media itself. 
5 Convolution can be described in either the space domain or the 

frequency domain. In the frequency domain, convolution of two functions is the 
same as multiplying amplitude spectra and adding the phases. Correlation is 
identical to convolution in that magnitudes multiply; however, in correlation 
phase subtracts. Therefore, convolving an image with a uniform carrier preserves 

10 the magnitude structure of the image. Correlating with the same uniform carrier 
will subtract out the phase dispersion induced by the second carrier leaving us 
with a carrier substantially the same as in prior art. Since the key is known to no 
one but the generating authority and the receiving authority, a very secure system 
is available regardless if one subsections and permutes the fibrous region scanned 

15 from the media. 

Accordingly, the output of the rearrangement step 34 of FIG. 5 is 
replaced in the present invention by the output of the process detailed in FIG. 6. 
FIG 6. depicts the process of forming a secure dispersed message 60. A message 
image 24 is provided. In a postage application the message contents can be 

20 postage amount, zip codes, or hashes of the destination address. As described 
previously, the message can be encrypted, if desired. Next the carrier derived 
from the media 32 is convolved with the message image to form the first 
convolved image. Next, the secret key 56 is used to generate a second carrier 55, 
which is convolved with the first convolved image to form the secure dispersed 

25 message 60. Switching the order of convolution between carrier 28 and carrier 55 
makes no difference to the final output because convolution simply adds phase 
and multiplies the Fourier magnitudes. It is understood that convolution can be 
performed as correlation in the Fourier Domain without comprise, as is well 
known in the art. 
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As mentioned above, the objective of the shaping step as shown in 
FIG. 5 block 30 is to provide a carrier that maintains the fibrous character of the 
scan, but also to provide an efficient information carrying entity. The shaping step 
shown in block 30 of FIG. 5 will now be described in greater detail. The shaping 
5 of the amplitude spectrum (derived from the FFT data) is performed with respect 
to the human visual system and sharpness loss due to the printing process. The 
human visual system's role was described during the discussion of FIG. 2 above. 
Recall that except for near the DC frequency, a Fourier amplitude spectrum is 
created that is proportional the inverse CSF. A carrier derived in this manner can 

10 be improved on further by realizing that when printing an image on a receiver, the 
modulation transfer function (MTF) of the printer can be backed out before 
printing. (A function that expresses the ability of an optical or electronic device to 
transfer signals faithfully as a function of the spatial of the signal is commonly 
known as a modulation transfer function (MTF). The MTF is the ratio of the 

15 percentage modulation of a sinusoidal signal leaving to that entering the device 
over the range of frequencies of interest.) 

Therefore except for the very low frequencies around DC, the 
Fourier amplitude should be proportional to: 

20 MTF p ^(u,v)CSF;U S co^on S («, v) (9) 

(u,v represent spatial frequencies of the two dimensional FFT) 

It is important to note that the input data to the FFT is real. The 
input spatial imaginary component is comprised entirely of zeros. However, in the 
25 Fourier domain, there will be an imaginary component. After shaping we'd like to 
make sure that the inverse FFT provides a zero valued imaginary component. This 
ensures that energy defined in the FFT domain was not wasted. The concepts 
involved with ensuring that the inverse FFT is real is detailed in Honsinger, et al., 
United States Patent 6,044,156. 
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Now, it is well known to those in the practice of image processing 
that the phase contains the important information in an image, maintaining this 
information for this application is of paramount importance. The phase 
information of the Fourier transform contains the bulk of fibrous structure 
5 information. Only the amplitude spectrum of the FFT data should be modified 
during this shaping process. The phase value at each Fourier frequency should 
always be maintained. Recall that Fourier phase is given by the equation: 

0{u,v) = tan _1 (Imaginary(F(u,v))/Real(F(u,v))) (10) 

10 

Recall also that Fourier amplitude is given by the equation: 



amplitude(u,v) = VrmaginaryCF^v))? +Real(F(u,v)^ (11) 

15 If one were to multiply both imaginary(F(u,v)) and Reai(F(u,v))by a(u,v) , the phase (see 
equation 10) is maintained and the amplitude spectrum (see equation 1 1) is 
modified. Therefore, the modification of the Fourier amplitude spectrum can be 
performed by multiplying the real and the imaginary components of the Fourier 
transform by the scalar that gives us the desired amplitude. If, 

20 

a(u,v) = 

MTF^ (u, v)C^tw mg oenaMon S («, v) / Vhnagmary(F(u,v)? +Real(F(u,v)| (12) 

Then, the shaping step is simply performed by multiplying each component of the 
real and imaginary Fourier coefficients by a{u,v) , that is: 

25 

Imaginaiy(F new (u,v))=a(w, v)Imagiiiaiy(F (u,v)) (13) 



Real(F new (u,v))=a(w, v)Real(F (u,v)) 



(14) 
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When it comes time to extract the message, a user may or may not 
have the scanned carrier available. If the carrier is not known beforehand, then it 
becomes necessary to rescan it from the paper. In this case, assume that the 
location of the carrier (that is, the location of the fibrous region) is known in 
5 advance. The carrier is obtained by repeating the steps of FIG. 5 with the 
exception of the rearrangement step 34. That is, the process of FIG. 5 is 
terminated at step 32, which yields the shaped carrier. 

Fig. 7 depicts the decoding of the embedded image. The secure 
embedded image 14 is scanned to form the scanned secure embedded image 40. If 

10 a secure carrier has not been provided, the steps of Fig. 5 must be performed on 
the scan area 12 to form the shaped carrier 32. The shaped carrier 32 is correlated 
with the scanned secure embedded image 40. Following this, a key 56 is provided 
to form the second carrier 55. Optionally, the second carrier 55 may be stored 
instead of the key. The result of the correlation between the shaped carrier 32 and 

1 5 the scanned secure embedded image 40 is correlated with the second carrier 55. 
The result of the second correlation is the extracted message image 65. The 
extracted message can now be decoded using the art described above. As 
mentioned above, one needs to know where the bit values of the extracted 
message image 65 are located to properly interpret the message contents. 

20 Referring now to Fig. 8., the result of finding the location of each 

bit on the extracted message image 65 and tabulating the bits in a predetermined 
way is the extracted encrypted message 70. The extracted encrypted message 70 is 
decrypted 72 using a private key. The result of this is the embedded message 74. 
The embedded message is interpreted 78 by comparing to a table stored in the 

25 computer or computerized device. The table delineates all of the known valid 

messages. If the embedded message is the same as a known valid entry, then the 
letter is declared authentic, if not, the letter is declared suspicious or invalid and is 
given special attention. 
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The invention has been described in detail with particular reference 
to certain preferred embodiments thereof, but it will be understood that variations 
and modifications can be effected within the spirit and scope of the invention. 

5 



- 18- 
PARTS LIST 

2 binary message image 

4 iconic message image 

12 scan area 

14 secure embedded image 

16 message 

18 encryption 

20 bits from encryption 

22 message template 

24 message image 

26 scanning 

28 transforming 

30 shaping 

3 1 inverse trans forming 

32 media 
34 rearrange 

40 secure embedded image 

55 second carrier 

56 secret key 

60 dispersed image 

65 extracted message image 

70 extracted encrypted message 

72 decrypted 

74 embedded image 

78 message interpreter 



